MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

🗓️ 22 Sep 2026 20:34:27Reported by GitHub Advisory DatabaseType

Path Traversal in MPXJ allows arbitrary file write when reading crafted PRX or STX files.

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2026-65829	22 Sep 202619:54	–	cve
Cvelist	CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers	22 Sep 202619:54	–	cvelist
EUVD	EUVD-2026-84819	22 Sep 202619:54	–	euvd
NVD	CVE-2026-65829	22 Sep 202620:17	–	nvd
OSV	GHSA-7952-GX68-CJQR MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers	22 Sep 202620:34	–	osv

Vulners

Node

net.sf.mpxj mpxjRange7.3.0–16.5.0maven

net.sf.mpxj-for-vbRange7.3.0–16.5.0nuget

net.sf.mpxj-for-csharpRange7.3.0–16.5.0nuget

net.sf.mpxjRange7.3.0–16.5.0nuget

mpxj mpxjRange7.3.0–16.5.0pip

mpxj mpxjRange7.3.0–16.5.0rubygems

mpxj.netRange7.3.0–16.5.0nuget

Source	Link
github	www.github.com/joniles/mpxj/security/advisories/GHSA-7952-gx68-cjqr
github	www.github.com/joniles/mpxj/commit/4347315afab1ef5a2907978a754fbc5b0ff58e6f
github	www.github.com/joniles/mpxj/releases/tag/v16.5.0
github	www.github.com/advisories/GHSA-7952-gx68-cjqr

22 Sep 2026 20:34Current

CVSS 3.15.3